create-pmos 0.52.0 → 0.53.1

package/workspace/cut-stub.js

@@ -0,0 +1,40 @@
+'use strict';
+/* PMOS workspace — the suites whose subject R29 cut (pm-os-absorb Run 3, slice 3D).
+ *
+ * The All repos, Knowledge, Memory, Skills and Scheduled views, and the Reports tab, are gone from the shell. The suites that
+ * drew them in a browser (pm-r29-portfolio, -knowledge, -memory, -skills-scheduled, -reports-addrepo) have nothing to draw.
+ * Each keeps its file and its name, and asserts what is left of its subject: the view is not in the table, its module is not
+ * on disk, and the thing that replaced it is still there. Every removed assertion is in workspace/replaced-tests.json
+ * (C03 to C11). No browser and no server: these are reads of the sources, so they run in milliseconds.
+ */
+const fs = require('fs');
+const path = require('path');
+
+const PM = path.join(__dirname, 'public', 'pm');
+const read = (f) => { try { return fs.readFileSync(path.join(PM, f), 'utf8'); } catch { return null; } };
+const gone = (f) => !fs.existsSync(path.join(PM, f));
+/** The keys of `export const VIEWS = { … }` in panel-cockpit.js, in order. */
+const viewKeys = () => {
+  const m = /export const VIEWS = \{([\s\S]*?)\n\};/.exec(read('panel-cockpit.js') || '');
+  return m ? [...m[1].matchAll(/^ {2}(\w+):/gm)].map((x) => x[1]) : [];
+};
+/** The keys of `BOARD_MODULES = { … }` in panel-cockpit.js. */
+const boardKeys = () => {
+  const m = /BOARD_MODULES = \{([\s\S]*?)\};/.exec(read('panel-cockpit.js') || '');
+  return m ? [...m[1].matchAll(/(\w+):\s*'\.\/view-/g)].map((x) => x[1]) : [];
+};
+
+function suite(label, cases) {
+  const results = [];
+  for (const [name, fn] of cases) {
+    let cond = false; let extra = '';
+    try { const r = fn(); cond = r === true || (r && r.cond === true); extra = r && r.extra ? r.extra : ''; } catch (e) { extra = String((e && e.message) || e); }
+    results.push(cond);
+    console.log(`${cond ? '✓' : '✗'} ${name}${extra ? ' — ' + extra : ''}`);
+  }
+  const bad = results.filter((x) => !x).length;
+  console.log(`\n${results.length - bad}/${results.length} ${label} assertions passed`);
+  process.exit(bad ? 1 : 0);
+}
+
+module.exports = { suite, read, gone, viewKeys, boardKeys, PM };

package/workspace/first-paint-audit.js

@@ -0,0 +1,145 @@
+'use strict';
+/* first-paint-audit.js — the first-paint instrument, shared by every first-paint suite (pm-os-absorb seams).
+ *
+ * Not a suite: first-paint-count.test.js (the Breakdown, Run 1) and each destination's first-paint suite (Initiatives
+ * 2D, Today 3B, Board 4D, Reports 5C) require it, so every surface is counted with ONE instrument: shoot.js's audit(),
+ * the one the PM's numbers came from. A "control" is a visible button, link, input, select, textarea, [role=button] or
+ * [draggable=true] inside the viewport on first paint.
+ *
+ *   EXPECT                      PRD Q5's budgets at 1280×800, counted outside the dock and the terminal
+ *   audit(phone)                shoot.js's audit, verbatim; runs in the page (page.evaluate(audit, false))
+ *   countIn([scope, exclude])   the same selector and visibility test, inside `scope` and outside `exclude`; in the page
+ *   stableCount([scope, exclude, minus])   countIn once the screen is still (two animation frames apart); in the page,
+ *                               after installCounter(page)
+ *   installCounter(page)        the init script stableCount needs (window.__countIn); call it before page.goto
+ *
+ * Do not tune the selector or the visibility test for one surface: change them here, for all, or not at all.
+ */
+
+const EXPECT = Object.freeze({ today: 17, initiatives: 24, board: 33, reports: 14 });
+
+/* ── shoot.js audit(), copied verbatim (scratchpad/specimens2/shoot.js, 2026-10-05) ─────────────────────────────── */
+// runs in the page
+function audit(phone) {
+  const SEL = 'button, a[href], a[role], input:not([type="hidden"]), select, textarea, [role="button"], [draggable="true"]';
+  const vw = window.innerWidth;
+  const vh = window.innerHeight;
+  const visible = (el) => {
+    if (el.closest("dialog:not([open])")) return false;
+    const pop = el.closest("[popover]");
+    if (pop && !pop.matches(":popover-open")) return false;
+    const r = el.getBoundingClientRect();
+    if (r.width < 1 || r.height < 1) return false;
+    for (let n = el; n && n.nodeType === 1; n = n.parentElement) {
+      const cs = getComputedStyle(n);
+      if (cs.display === "none" || cs.visibility === "hidden" || Number(cs.opacity) === 0) return false;
+    }
+    return r.bottom > 0 && r.right > 0 && r.top < vh && r.left < vw;
+  };
+  const describe = (el) => {
+    const t = (el.getAttribute("aria-label") || el.textContent || el.value || "").trim().replace(/\s+/g, " ");
+    const r = el.getBoundingClientRect();
+    return `${el.tagName.toLowerCase()}${el.className && typeof el.className === "string" ? "." + el.className.trim().split(/\s+/).slice(0, 2).join(".") : ""} "${t.slice(0, 28)}" ${Math.round(r.width)}x${Math.round(r.height)}`;
+  };
+  const all = [...document.querySelectorAll(SEL)].filter(visible);
+  const notBar = all.filter((el) => !el.closest(".specbar"));
+  const small = phone
+    ? notBar.filter((el) => {
+        const r = el.getBoundingClientRect();
+        // inline text links inside prose are exempt from the 44px rule
+        if (el.tagName === "A" && !el.className && getComputedStyle(el).display === "inline") return false;
+        return r.width < 43.5 || r.height < 43.5;
+      })
+    : [];
+  const sw = document.documentElement.scrollWidth;
+  const offenders = [];
+  if (sw > vw) {
+    for (const el of document.querySelectorAll("body *")) {
+      const r = el.getBoundingClientRect();
+      if (r.right > vw + 0.5 && r.width > 0) {
+        let clipped = false;
+        for (let p = el.parentElement; p && p !== document.body; p = p.parentElement) {
+          const o = getComputedStyle(p).overflowX;
+          if (o === "auto" || o === "scroll" || o === "hidden" || o === "clip") {
+            clipped = true;
+            break;
+          }
+        }
+        if (!clipped) offenders.push({ el: describe(el), right: Math.round(r.right) });
+      }
+    }
+    offenders.sort((a, b) => b.right - a.right);
+  }
+  return {
+    title: document.title,
+    controlsInViewport: all.length,
+    controlsExcludingSpecbar: notBar.length,
+    smallTargets: small.length,
+    smallTargetExamples: small.slice(0, 8).map(describe),
+    scrollWidth: sw,
+    innerWidth: vw,
+    horizontalOverflow: sw > vw,
+    overflowOffenders: offenders.slice(0, 6),
+    pageHeight: document.documentElement.scrollHeight
+  };
+}
+
+/**
+ * The same selector and the same visibility test as audit(), counted inside `scope` and outside every `exclude`.
+ * Runs in the page. Returns { n, names }.
+ */
+function countIn([scope, exclude]) {
+  const SEL = 'button, a[href], a[role], input:not([type="hidden"]), select, textarea, [role="button"], [draggable="true"]';
+  const vw = window.innerWidth;
+  const vh = window.innerHeight;
+  const visible = (el) => {
+    if (el.closest("dialog:not([open])")) return false;
+    const pop = el.closest("[popover]");
+    if (pop && !pop.matches(":popover-open")) return false;
+    const r = el.getBoundingClientRect();
+    if (r.width < 1 || r.height < 1) return false;
+    for (let n = el; n && n.nodeType === 1; n = n.parentElement) {
+      const cs = getComputedStyle(n);
+      if (cs.display === "none" || cs.visibility === "hidden" || Number(cs.opacity) === 0) return false;
+    }
+    return r.bottom > 0 && r.right > 0 && r.top < vh && r.left < vw;
+  };
+  const roots = scope ? [...document.querySelectorAll(scope)] : [document];
+  const seen = new Set();
+  for (const root of roots) for (const el of root.querySelectorAll(SEL)) {
+    if (seen.has(el) || !visible(el)) continue;
+    if (exclude && el.closest(exclude)) continue;
+    seen.add(el);
+  }
+  const names = [...seen].map((el) => `${el.tagName.toLowerCase()} "${(el.getAttribute('aria-label') || el.textContent || '').trim().replace(/\s+/g, ' ').slice(0, 24)}"`);
+  return { n: seen.size, names };
+}
+
+/**
+ * countIn, but only once the screen is still: the count of `scope` minus `exclude` must be the same two animation
+ * frames apart (up to 60 tries). With `minus`, the controls inside `minus` are counted out in the SAME task, so the two
+ * numbers of a difference come from one paint. Runs in the page; needs window.__countIn (an init script).
+ */
+async function stableCount([scope, exclude, minus]) {
+  const frame = () => new Promise((r) => requestAnimationFrame(() => requestAnimationFrame(r)));
+  const both = () => {
+    const a = window.__countIn([scope, exclude]);
+    const b = minus ? window.__countIn([scope, exclude ? exclude + ', ' + minus : minus]) : null;
+    return { n: a.n, names: a.names, without: b ? b.n : null };
+  };
+  let prev = both();
+  for (let k = 0; k < 60; k++) {
+    await frame();
+    const cur = both();
+    if (cur.n === prev.n && cur.without === prev.without) return { ...cur, still: true, tries: k + 1 };
+    prev = cur;
+  }
+  return { ...prev, still: false, tries: 60 };
+}
+
+/** Add the init script that stableCount calls. Call it once per page, before the first goto. */
+function installCounter(page) {
+  return page.addInitScript({ content: 'window.__countIn = ' + countIn.toString() + ';' });
+}
+
+module.exports = { EXPECT, audit, countIn, stableCount, installCounter };

package/workspace/fixtures/capture/requirements/capture-2026-10-04-1.md

@@ -0,0 +1,10 @@
+---
+type: Reference
+title: "Capture 2026-10-04 1"
+timestamp: 2026-10-04T08:12:00Z
+source: capture
+by: pm:wawan
+synthetic: true
+---
+
+Partner admins want to export the audit log as CSV before the quarterly review.

package/workspace/fixtures/initiatives-api/list.json

@@ -0,0 +1,176 @@
+{
+  "ok": true,
+  "ws": "w-north",
+  "view": "list",
+  "sig": {
+    "placements": "3f786850e387550fdab836ed7e6dc881de23001b",
+    "items": "89e6c98d92887913cadf06b2adb97f26cde4849b",
+    "measurements": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
+    "records": "2b66fd261ee5c6cfc8de7fa466bab600bcfe4f69"
+  },
+  "now": "2026-10-05T12:00:00.000Z",
+  "rules": {
+    "stall_days": 5,
+    "dormant_days": 45,
+    "report_cycle_days": 14,
+    "now_cap": null,
+    "via_required_from": null
+  },
+  "groups": [
+    {
+      "objective": {
+        "id": "O2",
+        "title": "Partners self-serve",
+        "period": "Q4 2026"
+      },
+      "anchors": [
+        {
+          "anchor": "KR 2.1",
+          "kind": "kr",
+          "title": "Partner sign-in without a ticket",
+          "measurement": {
+            "value": 41,
+            "target": 55,
+            "unit": "%",
+            "as_of": "2026-10-02",
+            "source": "planning/okrs/fy26-q4.md@1a2b3c4"
+          },
+          "rows": [
+            {
+              "id": "partner-sso",
+              "title": "Partner SSO",
+              "lane": "feature",
+              "anchor": "KR 2.1",
+              "anchor_kind": "kr",
+              "horizon": "now",
+              "rank": 0,
+              "confirmed": true,
+              "dormant": false,
+              "check_by": "2026-10-30",
+              "stage": {
+                "id": "build",
+                "label": "Build"
+              },
+              "display": {
+                "word": "Build",
+                "stage": "build",
+                "waitingOn": "pm",
+                "act": "approval",
+                "idleDays": 1,
+                "line2": "Waiting on you: approval"
+              },
+              "health": {
+                "level": "on",
+                "reasons": []
+              },
+              "progress": {
+                "done": 7,
+                "total": 12,
+                "label": "7 of 12"
+              },
+              "next_due": "2026-11-14",
+              "last_activity": "2026-10-04T09:00:00Z"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "objective": null,
+      "anchors": [
+        {
+          "anchor": "health:tech",
+          "kind": "health",
+          "title": "Tech health",
+          "measurement": null,
+          "rows": [
+            {
+              "id": "audit-log",
+              "title": "Audit log export",
+              "lane": "chore",
+              "anchor": "health:tech",
+              "anchor_kind": "health",
+              "horizon": "now",
+              "rank": 1,
+              "confirmed": false,
+              "dormant": false,
+              "check_by": "2026-10-01",
+              "stage": {
+                "id": "evaluate",
+                "label": "Evaluate"
+              },
+              "display": {
+                "word": "Evaluate",
+                "stage": "evaluate",
+                "waitingOn": "agent",
+                "act": "rubric",
+                "idleDays": 1,
+                "line2": "Waiting on agent: rubric"
+              },
+              "health": {
+                "level": "at-risk",
+                "reasons": [
+                  {
+                    "level": "at-risk",
+                    "code": "check-by-passed",
+                    "text": "check-by 1 Oct passed",
+                    "source": "planning/runs/placements.jsonl"
+                  }
+                ]
+              },
+              "progress": {
+                "done": 3,
+                "total": 5,
+                "label": "3 of 5"
+              },
+              "next_due": "2026-10-20",
+              "last_activity": "2026-09-29T15:00:00Z"
+            },
+            {
+              "id": "old-import",
+              "title": "Legacy importer",
+              "lane": "chore",
+              "anchor": "health:tech",
+              "anchor_kind": "health",
+              "horizon": "later",
+              "rank": 0,
+              "confirmed": true,
+              "dormant": true,
+              "check_by": null,
+              "stage": {
+                "id": "intake",
+                "label": "Intake"
+              },
+              "display": {
+                "word": "Intake",
+                "stage": "intake",
+                "waitingOn": null,
+                "act": null,
+                "idleDays": 1,
+                "line2": ""
+              },
+              "health": {
+                "level": "on",
+                "reasons": []
+              },
+              "progress": {
+                "done": 0,
+                "total": 0,
+                "label": "no breakdown"
+              },
+              "next_due": null,
+              "last_activity": "2026-07-01T10:00:00Z"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "flags": [
+    {
+      "kind": "unreadable",
+      "init": null,
+      "why": "line 9: not JSON"
+    }
+  ]
+}

package/workspace/fixtures/initiatives-api/post-403.json

@@ -0,0 +1,5 @@
+{
+  "ok": false,
+  "status": 403,
+  "error": "only the PM can move an item to Now, from the page; this request has no Origin header"
+}

package/workspace/fixtures/initiatives-api/post-ok.json

@@ -0,0 +1,10 @@
+{
+  "ok": true,
+  "written": 1,
+  "sig": {
+    "placements": "3f786850e387550fdab836ed7e6dc881de23001b",
+    "items": "89e6c98d92887913cadf06b2adb97f26cde4849b",
+    "measurements": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
+    "records": "2b66fd261ee5c6cfc8de7fa466bab600bcfe4f69"
+  }
+}

package/workspace/fixtures/initiatives-api/roadmap.json

@@ -0,0 +1,208 @@
+{
+  "ok": true,
+  "ws": "w-north",
+  "view": "roadmap",
+  "sig": {
+    "placements": "3f786850e387550fdab836ed7e6dc881de23001b",
+    "items": "89e6c98d92887913cadf06b2adb97f26cde4849b",
+    "measurements": "da39a3ee5e6b4b0d3255bfef95601890afd80709",
+    "records": "2b66fd261ee5c6cfc8de7fa466bab600bcfe4f69"
+  },
+  "now": "2026-10-05T12:00:00.000Z",
+  "rules": {
+    "stall_days": 5,
+    "dormant_days": 45,
+    "report_cycle_days": 14,
+    "now_cap": null,
+    "via_required_from": null
+  },
+  "header": {
+    "now": {
+      "count": 2,
+      "kr": 1,
+      "health": 1,
+      "cap": null
+    },
+    "next": {
+      "count": 1
+    },
+    "later": {
+      "count": 0,
+      "dormant": 1
+    }
+  },
+  "horizons": {
+    "now": [
+      {
+        "id": "partner-sso",
+        "title": "Partner SSO",
+        "lane": "feature",
+        "anchor": "KR 2.1",
+        "anchor_kind": "kr",
+        "horizon": "now",
+        "rank": 0,
+        "confirmed": true,
+        "dormant": false,
+        "check_by": "2026-10-30",
+        "stage": {
+          "id": "build",
+          "label": "Build"
+        },
+        "display": {
+          "word": "Build",
+          "stage": "build",
+          "waitingOn": "pm",
+          "act": "approval",
+          "idleDays": 1,
+          "line2": "Waiting on you: approval"
+        },
+        "health": {
+          "level": "on",
+          "reasons": []
+        },
+        "progress": {
+          "done": 7,
+          "total": 12,
+          "label": "7 of 12"
+        },
+        "next_due": "2026-11-14",
+        "last_activity": "2026-10-04T09:00:00Z"
+      },
+      {
+        "id": "audit-log",
+        "title": "Audit log export",
+        "lane": "chore",
+        "anchor": "health:tech",
+        "anchor_kind": "health",
+        "horizon": "now",
+        "rank": 1,
+        "confirmed": false,
+        "dormant": false,
+        "check_by": "2026-10-01",
+        "stage": {
+          "id": "evaluate",
+          "label": "Evaluate"
+        },
+        "display": {
+          "word": "Evaluate",
+          "stage": "evaluate",
+          "waitingOn": "agent",
+          "act": "rubric",
+          "idleDays": 1,
+          "line2": "Waiting on agent: rubric"
+        },
+        "health": {
+          "level": "at-risk",
+          "reasons": [
+            {
+              "level": "at-risk",
+              "code": "check-by-passed",
+              "text": "check-by 1 Oct passed",
+              "source": "planning/runs/placements.jsonl"
+            }
+          ]
+        },
+        "progress": {
+          "done": 3,
+          "total": 5,
+          "label": "3 of 5"
+        },
+        "next_due": "2026-10-20",
+        "last_activity": "2026-09-29T15:00:00Z"
+      }
+    ],
+    "next": [
+      {
+        "id": "billing-v2",
+        "title": "Billing v2",
+        "lane": "feature",
+        "anchor": "KR 1.3",
+        "anchor_kind": "kr",
+        "horizon": "next",
+        "rank": 0,
+        "confirmed": true,
+        "dormant": false,
+        "check_by": null,
+        "stage": {
+          "id": "spec",
+          "label": "Spec"
+        },
+        "display": {
+          "word": "Spec",
+          "stage": "spec",
+          "waitingOn": null,
+          "act": null,
+          "idleDays": 1,
+          "line2": ""
+        },
+        "health": {
+          "level": "on",
+          "reasons": []
+        },
+        "progress": {
+          "done": 0,
+          "total": 0,
+          "label": "no breakdown"
+        },
+        "next_due": null,
+        "last_activity": "2026-09-20T10:00:00Z"
+      }
+    ],
+    "later": []
+  },
+  "dormant": [
+    {
+      "id": "old-import",
+      "title": "Legacy importer",
+      "lane": "chore",
+      "anchor": "health:tech",
+      "anchor_kind": "health",
+      "horizon": "later",
+      "rank": 0,
+      "confirmed": true,
+      "dormant": true,
+      "check_by": null,
+      "stage": {
+        "id": "intake",
+        "label": "Intake"
+      },
+      "display": {
+        "word": "Intake",
+        "stage": "intake",
+        "waitingOn": null,
+        "act": null,
+        "idleDays": 1,
+        "line2": ""
+      },
+      "health": {
+        "level": "on",
+        "reasons": []
+      },
+      "progress": {
+        "done": 0,
+        "total": 0,
+        "label": "no breakdown"
+      },
+      "next_due": null,
+      "last_activity": "2026-07-01T10:00:00Z"
+    }
+  ],
+  "proposals": [
+    {
+      "eid": "p0q1r2s3t4u5",
+      "initiative": "billing-v2",
+      "title": "Billing v2",
+      "horizon": "now",
+      "after": "audit-log",
+      "by": "agent:sess-7",
+      "at": "2026-10-04T11:00:00Z"
+    }
+  ],
+  "flags": [
+    {
+      "kind": "unreadable",
+      "init": null,
+      "why": "line 9: not JSON"
+    }
+  ]
+}